1.5 Cisco NGIPS Deployment Modes CCIE-SECURITY Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which statement accurately describes an in-line deployment of a Cisco NGIPS?

   • AThe NGIPS is deployed out-of-band and only generates alerts without affecting traffic flow.
   • BThe NGIPS is connected to a switch SPAN port and receives a copy of traffic.
   • CThe NGIPS is placed directly in the traffic path and can drop or block malicious traffic.
   • DThe NGIPS is connected to a network TAP and analyzes a copy of traffic.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a key capability of a Cisco NGIPS deployed in-line that is NOT available in a passive deployment?

   • AIt can receive a copy of traffic from a TAP.
   • BIt can block or drop malicious traffic in real time.
   • CIt can generate alerts for security events.
   • DIt can analyze traffic for threats.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How does a Cisco NGIPS in a passive deployment monitor network traffic?

   • AIt receives a copy of traffic and analyzes it without affecting the original traffic flow.
   • BIt must be the default gateway for the network.
   • CIt is placed in the traffic path and forwards traffic after inspection.
   • DIt uses active responses to block malicious traffic.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of a Cisco NGIPS in a passive deployment?

   • ATo replace the firewall in the network.
   • BTo provide high availability for the network path.
   • CTo enforce security policies by dropping malicious packets.
   • DTo detect threats and generate alerts without impacting traffic flow.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the role of a network TAP in a Cisco NGIPS deployment?

   • ATo provide a copy of network traffic to the NGIPS for analysis.
   • BTo block malicious traffic before it reaches the NGIPS.
   • CTo route traffic through the NGIPS for inline inspection.
   • DTo aggregate traffic from multiple VLANs into one stream.
   Reveal Solution Discussion Select an answer first